Network Access Control

We have c3750s running NAC 4.8.  Occassionally, a workstation will flap between the untrusted and trusted vlans.  We updated the NIC drivers on the workstation, we verified SNMP was functioning correctly on the switch, and we allowed the phones to ac...

Hi,I've configured Uauth access with downloadable ACL on a ASA running 8.1 and I'd like to log  the traffic hitting that ACL.By default, the traffic is logged by the ACL applied on the interface.I've tried to add the "log" keyword on the ACL defined ...

Experts,Network with almost 50-60 cisco devices (router/switches/fw). All the gear currently using local user authentication. Wondering what is the minimum required s/w to manage the gear thru ACS (TACACS) considering we have the server (primary/back...

We currently are using a self-signed cert (for PEAP machine authentication) that was created on an ACS 3.3 appliance. That cert was manually installed on our laptops when they were configured for wireless conenctivity.My problem is, that self-signed ...

In CLI we have users log in at priv 1 and use "enable" to increase privilege and do configurations. This allows "accounting" of command history.On the AIR-AP1121G-A-K9 (12.3(8)JED1) I cannot duplicate this for http login.I can log in as a user at pri...

Hello Guys, Could anyone help me?https://supportforums.cisco.com/message/3049535#3049535I am trying to configure a Dynamic ACL for VPN users following the steps of "jrabinow" manual (check the link attached), but it doesn't work and i dont know why?....

Hi, there,I am working on a NAC Guest project where I need to do web-auth for wired-guest users.I read through the doc "IBNS: Cisco Integrated Local Web Authentication Deployment and Configuration Guide" and able to  get NGS working with ACS via inte...

I have two ACS servers I'm trying to install cumulative patch 3 onto.  One of them worked like a champ.  The other one keeps giving me the following error:hostname# acs patch install 5-2-0-26-3.tar.gpg repository CINMONITOR2Failed to copy file '5-2-0...

We have 3x Cisco ACS servers that we are using for centralised authentication for our switches, routers, etc..  the authentication works when the first server is available, but the devices are not querying the other 2 if the primary is unavailableaaa...

Greetings,How can we migrate from Juniper Steelbelted Radius to Cisco ACS 5.2 without loss of data and losing time?What are the steps or is there a migration toolkit that can help us?Thank you,Regards,

Hi allcan anyone explain to me in simple terms how devices encrypt and decrypt data when using pki, where does the private key come in to it? and what gets exchnagedcheers

Hi,We have configured an 2801 to aggregate some VPN clients. The problem is that between 20 and 50 minutes it asks for re-authentication even though the connection is not idle. Is there a timer that creates this problem?Below the applied configuratio...